4 ms·
Historically tradition is to encrypt the login, registration and administration pages, which is what people have been doing for decades. Full encryption of ever
by kevingadd 7y ago
Historically tradition is to encrypt the login, registration and administration pages, which is what people have been doing for decades. Full encryption of everything has advantages but that's not it.
- Operyl 7y agoAnd then it was later found out that, like I detailed in my edit, that that wasn't enough. Attackers could just modify the login page link on any unencrypted page and phish you that way. What I described is just one of many reasons the industry as a whole pushed to full-encryption.
- andkenneth 7y agoYes, of course you encrypt those, but you also need to link any page which can link to those as well, otherwise an attacker could put a link on the page which goes to their cred harvesting page instead of the secure login page.